legal · privacy

Privacy policy.

Who processes your data when you use multiconversion.com and its blog, what for, for how long and how to exercise your rights.

Last updated on 26 September 2026.

Data controller

The controller of the personal data collected on this website and its blog is:

Company
Multiconversion S.L.
Tax ID (CIF)
B98747629
Registration
Commercial Registry of Valencia (Registro Mercantil), volume 9983, book 7265, folio 169, sheet V-166063
Registered address
Calle Islas Canarias, 34, bajo C · 46023 Valencia (Spain)
Phone
+34 963 767 470
Email
valencia@multiconversion.com
Activity
Digital marketing agency

These are also the website owner details required by article 10 of Spanish Law 34/2002 on information society services (LSSI). For any question about your data, write to valencia@multiconversion.com.

What data we process, why and for how long

We only ask for the data we need for each purpose. The fields marked as required in each form are needed to help you; without them we cannot.

Contact and audit requests

Data
Name, email, phone, company, website, budget, topic and message, the language and where the visit came from: landing page, referring website and campaign parameters (utm, gclid, fbclid, msclkid).
Purpose
Answering your request, preparing the audit or proposal you ask for and knowing which channels bring us enquiries.
Legal basis
Taking pre-contractual steps at your request (article 6.1.b GDPR). For the visit-origin data, our legitimate interest in knowing which channels work (article 6.1.f).
How long
While we handle your request and, afterwards, until any liability arising from it has lapsed.

Newsletter

Data
Your email and language.
Purpose
Sending you the monthly newsletter.
Legal basis
Your consent when you subscribe (article 6.1.a GDPR).
How long
Until you unsubscribe, with the link in every email or by writing to us.

WhatsApp conversations (blog)

Data
When you press the button, the page you write from, the campaign parameters and, if you accepted analytics, the Google Analytics identifier, which are recorded in our CRM. Then, your number and what you write to us.
Purpose
Answering your question and knowing where it came from.
Legal basis
Your request (article 6.1.b GDPR) and our legitimate interest in knowing where enquiries come from (article 6.1.f).
How long
As for contact requests.

Job applications

Data
What you send us by email: your CV and contact details.
Purpose
Assessing your application in our recruitment processes.
Legal basis
Your request to take part in the process (article 6.1.b GDPR) and, if you allow us to consider you for others, your consent (article 6.1.a).
How long
While the recruitment process lasts. If you allow us to consider you for others, until you ask us to delete it.

Blog comments

Data
Name, email, website (if you give it), the comment and the IP address you send it from, which WordPress keeps to fight spam.
Purpose
Publishing and moderating your comment.
Legal basis
Your consent when you send it (article 6.1.a GDPR).
How long
While the comment is published or until you ask us to delete it.

Clients and suppliers

Data
Contact details of the people we work with and billing details.
Purpose
Managing the relationship, the services and invoicing.
Legal basis
The contract (article 6.1.b GDPR) and our tax and commercial obligations (article 6.1.c).
How long
While the relationship lasts and, afterwards, the periods required by law: 6 years under the Spanish Commercial Code and 4 under the General Tax Law.

Form security

Data
Your IP address and technical browser data.
Purpose
Checking that a form is sent by a person (Cloudflare Turnstile) and limiting repeated submissions from the same address. For that we keep a digest of the IP, not the IP itself, and only the last 10 minutes count.
Legal basis
Our legitimate interest in protecting the website, and the people who write to us, from spam (article 6.1.f GDPR).
How long
Cloudflare processes it at the moment of the check; the IP digest stops counting after 10 minutes.

Website analytics only works with your permission. We explain it, together with the cookies we use, in the cookie policy.

We do not make automated decisions or build profiles with your data.

Who else sees your data

We do not sell or share your data. We only disclose it when the law requires us to, for example to the Spanish Tax Agency or to courts. To operate we use these providers, which process the data on our behalf and under contract:

  • Hetzner Online GmbH (Germany): hosting of the website, the blog and our CRM.
  • Sendinblue SAS, “Brevo” (France): sending the form notifications and the newsletter.
  • Google Ireland Limited: email (Google Workspace) and, with your permission, analytics (Google Analytics).
  • Cloudflare, Inc.: anti-spam verification of the forms.

If you write to us on WhatsApp, the conversation goes through WhatsApp Ireland Limited (Meta), under its own terms. Payments with clients and suppliers go through our banks.

Transfers outside the European Economic Area

Google, Cloudflare and Meta may process data in the United States. They take part in the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection (decision of 10 July 2023), and they also apply standard contractual clauses. Hetzner and Brevo process the data in the European Union.

Your rights

You can ask us at any time to access your data, correct or erase it, object to or restrict its processing, and receive it in a format you can take to another service. If we process something based on your consent, you can withdraw it whenever you want, without affecting what was done before.

Write to valencia@multiconversion.com or by post to our registered address, saying which right you want to exercise. We will only ask you to prove your identity if we have reasonable doubts that it is you. We reply within one month at the latest.

If you think we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid) or to the data protection authority of the EU country where you live.

Minors

The website is not aimed at children under 14. If we learn that a child under that age has written to us without the permission of their parents or guardians, we will delete their data.

Security

The website and the forms are encrypted (HTTPS), only the team members who need the data can access it and we choose providers with sufficient guarantees. If there were a security breach affecting you, we would tell you when the law requires it.

Accurate and third-party data

The data you give us must be yours and true. If you give us someone else’s, you must have informed them and have their permission.

Changes to this policy

If we change how we process data, we will update this page and its date. If the change needs your permission, we will ask for it.